This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: rtIvwcSK2fl4SIiEwxTqKqwsXEIO23BMsDmQF/YCmLM= Subject key identifier: 11:49:05:13:45:65:B8:ED:A4:0E:71:BA:72:51:0B:20:F2:DA:98:4A Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1C3A Signing time: Mon 22 Dec 2025 15:59:49 +0000 Manifest this update: Mon 22 Dec 2025 15:59:49 +0000 Manifest next update: Mon 29 Dec 2025 15:59:49 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: hIyLAo9b38rMKJR5YXCZc/YL2Iu2bgCUBtf8lXHriHs=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: 7vSMEGE2WKILnDsupDw245nI6InVKo+5RlyNwkMHa0A=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: gkf5l1306jNCZlXkzkzc37H/VOhptBWvvDD29cbTyo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7257 (0x1c59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Dec 22 15:59:49 2025 GMT Not After : Dec 29 15:59:49 2025 GMT Subject: CN=69496af5-cf13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:b8:36:11:6c:45:e2:f8:03:2a:3c:88:f2: 65:76:f7:e8:6c:77:87:1a:2c:eb:85:be:58:51:1a: 13:24:26:f0:ba:3c:27:40:c8:68:4a:4b:15:0c:56: 1b:12:98:1b:9d:fd:d5:e8:6f:c2:96:5e:4e:80:12: 2f:c7:87:a8:04:56:d4:c8:05:61:c0:fc:31:eb:37: d1:72:d1:ce:75:b4:c6:7d:07:05:e1:66:ba:cb:4b: 96:c9:dd:ca:83:d9:68:ec:08:70:c2:54:f5:fa:ea: 72:8b:0e:55:db:54:81:14:84:6c:08:7d:78:2d:03: e1:a9:c8:61:e0:0e:6e:29:de:96:01:a9:3d:de:5f: e1:43:f5:4c:ec:bc:92:a3:12:97:f9:d6:05:26:c8: 5d:6a:bc:bf:34:eb:7b:81:06:39:b4:c8:0c:96:cd: 38:8a:d8:56:37:40:5c:56:f7:34:ce:bc:39:d3:31: 63:64:9c:d6:34:93:6d:7e:32:c3:df:26:f9:e8:df: dc:69:3b:44:85:10:df:37:93:9a:08:f7:6c:20:85: 30:fb:3d:b3:12:db:1c:fd:2a:ec:82:df:fb:ca:69: 31:b4:0b:0a:5b:d3:29:b3:39:09:44:db:eb:c6:70: 57:d2:d5:95:9c:6b:3b:51:66:6e:ce:bf:44:86:3a: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:49:05:13:45:65:B8:ED:A4:0E:71:BA:72:51:0B:20:F2:DA:98:4A X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:33:c8:58:f0:3d:45:60:32:5a:05:b2:33:74:67:59:ee:81: 9e:a8:96:9c:1a:c4:26:fc:9c:e0:67:6c:c7:ce:35:3b:7a:c8: 9b:9d:ad:83:f3:2e:6f:96:b5:6c:7c:3b:d4:d3:09:90:43:74: 84:d3:ab:9d:03:4c:d1:74:2a:32:ff:2c:a6:ae:fe:0d:c6:a0: 25:ef:98:e6:ce:a9:37:2c:d9:a6:d9:10:56:0f:c3:63:7e:20: 61:3d:e6:c6:c5:c3:d5:e5:8e:46:02:bf:ae:c9:33:d0:7d:2e: 96:75:cf:bd:bc:b1:bd:84:61:3d:e5:79:cd:9b:49:44:80:e3: 8c:95:79:74:cc:e7:4e:24:c7:e1:cb:3b:fe:37:04:a5:ef:e6: d2:a7:68:6a:aa:4e:92:13:b3:43:45:61:15:6e:0c:50:32:5a: e0:4e:59:0d:fb:79:7f:3d:be:f3:c3:13:33:8d:88:33:a7:aa: 9c:87:49:90:6d:e8:c6:41:9c:f2:ab:0c:57:ff:79:7e:23:bd: 13:c3:ce:71:3c:b8:d7:29:d8:ab:5a:dd:77:98:6e:82:f3:0a: 60:98:83:07:4b:85:23:00:b2:6d:0a:b0:bc:c1:c1:9e:50:b2: 51:6e:bd:99:0d:4e:89:bf:b2:e8:7c:60:77:36:45:ea:64:7c: 65:91:f5:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjUxMjIyMTU1OTQ5WhcNMjUxMjI5MTU1OTQ5WjAYMRYwFAYD VQQDDA02OTQ5NmFmNS1jZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7q4NhFsReL4Ayo8iPJldvfobHeHGizrhb5YURoTJCbwujwnQMhoSksVDFYb Epgbnf3V6G/Cll5OgBIvx4eoBFbUyAVhwPwx6zfRctHOdbTGfQcF4Wa6y0uWyd3K g9lo7AhwwlT1+upyiw5V21SBFIRsCH14LQPhqchh4A5uKd6WAak93l/hQ/VM7LyS oxKX+dYFJshdary/NOt7gQY5tMgMls04ithWN0BcVvc0zrw50zFjZJzWNJNtfjLD 3yb56N/caTtEhRDfN5OaCPdsIIUw+z2zEtsc/Srsgt/7ymkxtAsKW9MpszkJRNvr xnBX0tWVnGs7UWZuzr9EhjqV4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFJBRNF ZbjtpA5xunJRCyDy2phKMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWM8hY8D1FYDJaBbIzdGdZ7oGeqJacGsQm/JzgZ2zHzjU7esibna2D 8y5vlrVsfDvU0wmQQ3SE06udA0zRdCoy/yymrv4NxqAl75jmzqk3LNmm2RBWD8Nj fiBhPebGxcPV5Y5GAr+uyTPQfS6Wdc+9vLG9hGE95XnNm0lEgOOMlXl0zOdOJMfh yzv+NwSl7+bSp2hqqk6SE7NDRWEVbgxQMlrgTlkN+3l/Pb7zwxMzjYgzp6qch0mQ bejGQZzyqwxX/3l+I70Tw85xPLjXKdirWt13mG6C8wpgmIMHS4UjALJtCrC8wcGe ULJRbr2ZDU6Jv7LofGB3NkXqZHxlkfU3 -----END CERTIFICATE-----Generated at Tue Dec 23 09:41:24 2025 by rpki-client